Borrowing it
Nothing to install: this file belongs to kkollsga/codingest. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/kkollsga/codingest/main/AGENTS.mdgit clone --depth 1 https://github.com/kkollsga/codingestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/kkollsga/codingest/agents-md)<a href="https://agentmods.dev/instructions/kkollsga/codingest/agents-md"><img src="https://agentmods.dev/badge/instructions/kkollsga/codingest/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/kkollsga/codingest/agents-md"><img src="https://agentmods.dev/badge/instructions/kkollsga/codingest/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03948 | $0.03948 |
| Opus 5.5 | $0.01579 | $0.01579 |
| Sonnet 5.5 | $0.00790 | $0.00790 |
| Haiku 4.5 | $0.00395 | $0.00395 |
Grade A, and why
codingest AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 237 lines — stays where its author put it; the contents beside it link to each section on GitHub.
codingest — project instructions
Standalone extraction of KGLite's code_tree component: parse polyglot
codebases into queryable kglite knowledge
graphs. The graph engine and MCP server are imported from KGLite as cargo
libraries; this repo owns only the code-tree component. See README.md for the
workspace map and PARITY.md / BENCHMARKS.md for the regression record.
Authority: AGENTS.md is this repo's agent instructions; there is no
CLAUDE.md (Claude Code loads AGENTS.md in its place). .agents/skills/ holds
the skills; .claude/skills is a symlink to it so Claude Code finds them.
Working style
- Evidence over assertion. For a bug, reproduce it and confirm the root cause with evidence before fixing. For a behaviour-preserving refactor, probe the actual graph output first — don't trust your mental model.
- No bugs left behind. A defect you notice mid-task gets fixed (in scope) or
filed via
add-todo(out of scope) — never silently stepped over. The builder now lives only here, so builder bugs are ours to fix; if it traces to the sharedkgliteengine (kglite::api, Cypher, storage), route it to KGLite vianotify(KGLite is read-only here). - Offload, don't print. Write long output (stats JSON, bench tables, graph
dumps, big diffs) to
dev-docs/temp/(>1-day purge) ordev-docs/bench/out/and report the path. Keep responses under ~400 tokens. - Tooling discipline. Don't read a gate's status through a
tail/headpipe that can hide a failure — confirm the command actually reported success. After any builder/parser change, runcargo test(not just a hand-picked subset), and always the parity test if transformedcode_treesource moved. Three more shapes of the same trap, each of which failed in the reassuring direction (doctrineR2):git addwith one bad pathspec stages NOTHING. It is all-or-nothing: one typo'd or since-renamed path aborts the whole invocation, so the other files are not staged either — and the followinggit commitstill succeeds, on a commit missing the change. Read backgit diff --cached --name-only.grep -cexits 1 when the count is zero, sogrep -c … && nextbreaks the chain on exactly the empty result you needed to act on, and underset -eit kills the script. Capture it (n=$(… | grep -c … || true)) and test the number.- A backgrounded command's output must be read from its artifact. An echoed exit status, a "done" line, or the absence of visible errors is not the result — open the log the run wrote. This is how a failed background build reports green.
- Recipes never invoke bare
pythonand never verify via>/dev/null 2>&1; echo $?. A shell alias makes barepythonreport the alias's failure as the checker's verdict, and the null-masked$?hides which command failed — use the venv interpreter and read the target command's own status.
- Testing cadence: targeted per landing, the full battery once at the end.
A landing's gate is the suites chosen to catch what that change could break
— its touched surface plus that surface's direct consumers. This does not
weaken "run
cargo test, not just a hand-picked subset": the Rust battery is cheap and stays the per-phase gate. It applies to the heavymake gatesteps (release-gate scripts, bench smoke, wheel +tests/python) — those run once before a branch's first push and once over the union at the program's end, never per phase. Per-phase heavy runs buy nothing a completion-time run does not, and their cost is what makes agents quietly stop running them.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · -5 lines · -83 tokens per session bbd054f93494
- 1mo ago Changed · +18 lines · +245 tokens per session 355492508449
- 2mo ago First seen · 224 lines · 3,786 tokens per session scan A 4b9b5feaad62
codingest AGENTS.md is an instructions file published in the GitHub repository kkollsga/codingest (0 stars, last pushed yesterday), licensed MIT. It adds 3,948 tokens to every session, about $0.0158 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deepseek-harness AGENTS.md
AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.